Data Backups Permissions Error

I am evaluating DSE Enterprise and now have everything connected, Opscenter and Cassandra are running on a single node. The Agent is connected to Opscenter and everything looks good...

except...

When i click the Data Backups menu option i am presented with the following error.

Error loading snapshots: [node 172.17.1.158] Unable to add group permissions to /var/lib/cassandra/data and its subdirectories, and the current permissions do not allow the agent to examine the snapshot files.
exit status: 1

stderr:
sudo: a password is required
(172.17.1.158)

I have been through all the documentation and cannot find a mention on where to configure any authentication for the backups.

I am not sure if this something has gone wrong with the permissions because i emptied the data folder at the start of the install as per the installation instructions for DSE...

The agent needs the ability to read/write to all Cassandra data directories. If it is not able to do so, it will attempt to add group permissions automatically via sudo. What you're seeing is the failed attempt to do that.

If you're running OpsCenter from a tarball, you'll need to manually grant read/write privileges for whatever user you are using to run the agent.

Hi, I've run in to this same problem. However, the opscenter agent has sudo rights, but it doesn't look like they apply to the directory where my data or snapshots are. I changed my data directory from the default, do I need to update the agent's sudo file as well? Also - I didn't create the sudo access, I think it's automatic when the agent is installed.

The agent will try to add permissions to the new data directory, but that will only succeed if the agent can change permissions with sudo on that directory. You will have to make sure the agent user can sudo on those directories.

Ok - thanks. I don't see in the original sudo.d commands where the agent is able to change /var/lib/cassandra/data though either. I was going to model the sudo alias off of that. How does it work by default?

If the agent can't read/write the data directories, it attempts to change them, which it needs sudo for. If there are no problems with the agent user using sudo, the permissions are changed and the backup continues.